$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft File: ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft (raw, json) Hash identifier: LVc+y5mcZLZFv2gxu2WQduE+kQpN2kY0rOFX2Y3N3XQ= Subject key identifier: A0:F8:BF:34:6C:2B:66:4A:B0:BC:55:8D:86:0C:D9:86:09:0B:8E:BB Authority key identifier: 66:02:96:5A:7D:3F:7F:FB:F3:B5:1E:DF:14:E3:BB:CC:2D:F3:B6:9A Certificate issuer: /CN=6602965A7D3F7FFBF3B51EDF14E3BBCC2DF3B69A Certificate serial: 01D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft Manifest number: 01D0 Signing time: Thu 18 Sep 2025 09:20:47 +0000 Manifest this update: Thu 18 Sep 2025 09:20:47 +0000 Manifest next update: Sat 20 Sep 2025 09:20:47 +0000 Files and hashes: 1: EjNpMXXvvVCwyFGWyMubdtB2030.roa (hash: buZM3Uc7yt29XNlsfjEbiJShEjAL9a1I5Rfck0Eo4CY=) 2: ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl (hash: Mk+mlHz8MTBmp0DrkawtSBwyf6v6InttO3BxRB5a7KY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6602965A7D3F7FFBF3B51EDF14E3BBCC2DF3B69A Validity Not Before: Sep 18 09:20:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0F8BF346C2B664AB0BC558D860CD986090B8EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:c0:f9:d6:56:11:68:14:3f:24:70:ef:76: 42:51:f9:ff:82:22:2a:40:9e:6e:eb:99:cb:f5:36: fd:bb:41:a6:61:df:9e:98:85:78:8b:c4:38:62:8d: de:6b:11:76:33:03:44:ee:eb:e5:c5:f0:cc:2d:6b: fc:d1:f4:b3:18:54:44:d3:e8:dd:7e:a1:e5:a0:7f: b0:6b:3d:5e:10:b3:c4:54:87:8e:04:c2:f0:53:33: a8:ef:82:b9:4e:e5:89:e3:be:ad:f3:bf:bf:74:e9: 73:40:35:e9:77:c4:1c:ec:12:f2:17:27:7c:45:7a: 89:e5:3d:a9:30:85:3c:24:39:c9:00:18:79:15:3b: ff:8b:9f:5b:61:9f:b2:91:93:f8:78:04:6b:62:ad: be:ce:ce:c4:20:b8:88:d4:ba:e4:77:6c:33:2b:96: b6:62:c6:ef:bf:b1:59:7c:c8:9d:13:dd:83:92:dd: ad:f9:4f:ea:d8:59:b8:77:4b:87:f8:f1:69:bb:3d: ac:b5:7c:ee:56:3d:f3:36:92:50:10:8f:e3:27:2c: af:85:a1:db:a4:62:43:86:ff:e8:d0:c5:57:cb:ea: 33:9b:a7:b5:ad:a8:6d:5b:01:70:72:a8:af:f3:28: 1c:a8:8d:e8:48:e1:66:08:0c:c9:46:9d:84:ef:35: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:BF:34:6C:2B:66:4A:B0:BC:55:8D:86:0C:D9:86:09:0B:8E:BB X509v3 Authority Key Identifier: keyid:66:02:96:5A:7D:3F:7F:FB:F3:B5:1E:DF:14:E3:BB:CC:2D:F3:B6:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:28:18:9f:a8:9e:88:b4:73:a7:26:06:b2:a2:36:9c:81:46: 2f:9a:7e:54:9d:27:c2:18:d5:d7:63:37:82:38:5d:ab:94:c6: d5:85:bf:be:6e:49:1b:e1:be:48:16:d1:e2:97:86:c9:10:96: 04:b5:81:9b:2b:8f:35:16:a6:fc:b3:9f:16:3c:29:56:7d:cd: f6:4d:34:a8:73:26:44:b8:0d:19:12:e5:21:61:0f:0a:de:46: 01:ab:4e:30:b1:90:39:0b:9b:bc:bf:90:84:c5:8c:5a:c9:a4: 40:c7:c4:01:3d:f7:35:d9:54:c4:e6:45:8e:4c:df:ad:a5:cf: af:30:85:8a:69:eb:8c:7a:f3:80:6f:db:42:a4:37:43:8f:7e: 2d:e8:4f:1a:43:16:05:08:47:9b:d7:5e:12:32:09:7e:87:98: 15:85:a5:c6:c5:d7:24:58:06:f9:17:60:55:3e:fe:15:de:c2: 61:bd:92:44:f6:3b:fc:27:66:3c:c5:ff:a6:fc:c4:f6:8f:20: 76:98:2d:7d:d2:05:b3:7f:70:41:ba:89:bf:44:a5:c6:f1:d3: 56:e0:68:58:12:e1:50:d3:f4:ea:c3:22:23:57:ad:fa:61:5a: bb:4f:a6:ff:76:21:5d:e5:69:3a:77:98:2d:19:c3:ca:91:d4: 0f:9b:50:3e -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjYw Mjk2NUE3RDNGN0ZGQkYzQjUxRURGMTRFM0JCQ0MyREYzQjY5QTAeFw0yNTA5MTgw OTIwNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwRjhCRjM0NkMyQjY2 NEFCMEJDNTU4RDg2MENEOTg2MDkwQjhFQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLqcD51lYRaBQ/JHDvdkJR+f+CIipAnm7rmcv1Nv27QaZh356Y hXiLxDhijd5rEXYzA0Tu6+XF8Mwta/zR9LMYVETT6N1+oeWgf7BrPV4Qs8RUh44E wvBTM6jvgrlO5Ynjvq3zv7906XNANel3xBzsEvIXJ3xFeonlPakwhTwkOckAGHkV O/+Ln1thn7KRk/h4BGtirb7OzsQguIjUuuR3bDMrlrZixu+/sVl8yJ0T3YOS3a35 T+rYWbh3S4f48Wm7Pay1fO5WPfM2klAQj+MnLK+FodukYkOG/+jQxVfL6jObp7Wt qG1bAXByqK/zKByojehI4WYIDMlGnYTvNVjzAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUoPi/NGwrZkqwvFWNhgzZhgkLjrswHwYDVR0jBBgwFoAUZgKWWn0/f/vztR7f FOO7zC3ztpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVkVSWUZB U1QvWmdLV1duMF9mX3Z6dFI3ZkZPTzd6QzN6dHBvLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9aZ0tXV24wX2Zfdnp0UjdmRk9PN3pDM3p0cG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WRVJZRkFTVC9aZ0tXV24wX2Zfdnp0 UjdmRk9PN3pDM3p0cG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSgYn6ieiLRzpyYGsqI2nIFGL5p+VJ0nwhjV12M3gjhdq5TG1YW/vm5JG+G+ SBbR4peGyRCWBLWBmyuPNRam/LOfFjwpVn3N9k00qHMmRLgNGRLlIWEPCt5GAatO MLGQOQubvL+QhMWMWsmkQMfEAT33NdlUxOZFjkzfraXPrzCFimnrjHrzgG/bQqQ3 Q49+LehPGkMWBQhHm9deEjIJfoeYFYWlxsXXJFgG+RdgVT7+Fd7CYb2SRPY7/Cdm PMX/pvzE9o8gdpgtfdIFs39wQbqJv0SlxvHTVuBoWBLhUNP06sMiI1et+mFau0+m /3YhXeVpOneYLRnDypHUD5tQPg== -----END CERTIFICATE-----Generated at Thu Sep 18 12:34:09 2025 by rpki-client